10

CVE-2008-0347

Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01.  NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Application Server Version 1.0.2.2
Oracle ≫ Application Server Version 9.0.4.3
Oracle ≫ Application Server Version 10.1.2.0.2
Oracle ≫ Application Server Version 10.1.2.1.0
Oracle ≫ Application Server Version 10.1.2.2.0
Oracle ≫ Application Server Version 10.1.3.0.0
Oracle ≫ Application Server Version 10.1.3.1.0
Oracle ≫ Application Server Version 10.1.3.3.0
Oracle ≫ Application Server 9i Version 9.0.4.3
Oracle ≫ Application Server 9i Version 10.1.2.0.2
Oracle ≫ Collaboration Suite Version 10.1.2
Oracle ≫ Database Server Version 9.0.1.5 Edition fips
Oracle ≫ Database Server Version 9.2.0.8
Oracle ≫ Database Server Version 9.2.0.8dv
Oracle ≫ Database Server Version 10.1.0.5
Oracle ≫ Database Server Version 10.2.0.2
Oracle ≫ Database Server Version 10.2.0.3
Oracle ≫ Database Server Version 11.1.0.6
Oracle ≫ E-business Suite Version 11.5.9
Oracle ≫ E-business Suite Version 11.5.10
Oracle ≫ E-business Suite Version 11.5.10.2
Oracle ≫ E-business Suite Version 12.0.0
Oracle ≫ E-business Suite Version 12.0.1
Oracle ≫ E-business Suite Version 12.0.2
Oracle ≫ E-business Suite Version 12.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.7% 0.84
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://secunia.com/advisories/28518
Vendor Advisory
http://secunia.com/advisories/28556
Vendor Advisory
http://securitytracker.com/id?1019218
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
http://www.securityfocus.com/bid/27229
http://www.us-cert.gov/cas/techalerts/TA08-017A.html
US Government Resource
http://www.vupen.com/english/advisories/2008/0150
Vendor Advisory
http://www.vupen.com/english/advisories/2008/0180
Vendor Advisory
http://www.petefinnigan.com/Advisory_CPU_Jan_2008.htm
http://www.securityfocus.com/archive/1/487322/100/100/threaded